CVE-2012-3569
VMware OVF Tool 2.1 - Remote Code Execution via Crafted OVF File
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2012-3569.
PoCs published by Metasploit, Jeremy Brown, juan vazquez, including Metasploit module exploits/windows/browser/ovftool_format_string.
AI-analyzed exploit summary This Metasploit module exploits a format string vulnerability in VMWare OVF Tools 2.1 for Windows. It crafts a malicious OVF file that triggers the vulnerability when parsed, leading to arbitrary code execution.
Description
Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.
Exploits (4)
This Metasploit module exploits a format string vulnerability in VMWare OVF Tools 2.1 for Windows. It crafts a malicious OVF file that triggers the vulnerability when parsed, leading to arbitrary code execution.
This Metasploit module exploits a format string vulnerability in VMWare OVF Tools 2.1 for Windows. It crafts a malicious OVF file to achieve remote code execution by leveraging a format string attack during error message parsing.
This Metasploit module exploits a format string vulnerability in VMWare OVF Tools 2.1 for Windows. It crafts a malicious OVF file with a format string payload to achieve remote code execution by overwriting the saved EBP and redirecting execution flow.
This Metasploit module exploits a format string vulnerability in VMWare OVF Tools 2.1 for Windows. It crafts a malicious OVF file that triggers the vulnerability when parsed, leading to arbitrary code execution via a controlled format string attack.